Wikipedia:Suspected sock puppets/Astrotrain

=[[User:Astrotrain]]=

;Suspected sockpuppeteer

;Suspected sockpuppets

{{user5|1=163.167.129.124 }} - if any, this would be the user's home address.

;Report submission by

The Evil Spartan 22:57, 12 August 2007 (UTC)

;Evidence

The three IPs are clearly all sockpuppets. They show extensive knowledge of WP and its policies (see additions by 81.79 to WP:RPP), and are being used to circumvent scrutiny and often 3RR. I believe that they are sockpuppets of User:Astrotrain, who has been around since early 2005, and accumulated something like 9 blocks in the meantime, all for edit warring (and has recently been issued another warning by User:John for edit warring). It just so happens that the IPs are adding information in accordance with Astrotrain's POV, and often step in right after Astrotrain is does editing. In particular, I would like to point out:

Template:United Kingdom regions - edit warring with User:Padraig over a flag icon; has been doing so for a while now.
Template:UK subdivisions - same thing.
Template:World Heritage Sites in the United Kingdom - popped up just to revert Padraig.
Template:AONBs in Northern Ireland ( you will note that there were no others users edit warring with Padraig on that page)

The only other users engaged on this side of a POV in any of the edit wars all have a much cleaner history, are edit warring less often than Astrotrain, and are willing to at least try to use the talk page to come to a consensus (Astrotrain is not); in fact, some of the said pages have only had an edit war with Astrotrain and these IPs pushing a POV, which is pretty damning evidence. To the closing admin: if you are unable to conclude that these are the same users, I would ask that you could kindly copy the information over to WP:CU, where hopefully the checkusers will look at the IP's. The Evil Spartan 22:57, 12 August 2007 (UTC)

;Comments

: {{user|Astrotrain}} has been extensively involved in the controversial Northern Irish flags issue and has a penchant for wishing to add a particular flag into a number of highly visible templates. While this sounds trivial on the surface, there's an underlying sovereignty battle going on beneath all this. From the timings of the accounts above, I strongly suspect that the 8x.xx accounts are belonging to Astrotrain as the revert-times and articles targetted are too similar to be coincidental - Alison ☺ 23:09, 14 August 2007 (UTC)

:While it is the holiday season we know that Astrotrain is located in Scotland (as far as I am aware) and while the first and third ip's have a non-specific location the second is from the University of London (which would imply access to that instition, unlikely in a traveller) while the fifth is in on Stoke-on-Trent (the 4th being of unnamed location in London). The London university ip also has an extensive edit history making it unlikely and indeed if all the IPsn had been in Edinburgh I might have been convinced but this one isnt looking good to me, SqueakBox 23:29, 14 August 2007 (UTC)

:Four of these IPs trace back to the Energis UK network, two of which go through cable & wireless > Energis UK, the second in the list is University of North London, so it is possible that four of them are the same person.--padraig 23:42, 14 August 2007 (UTC)

:(ecd by Alison) My ip locator gives 2 from Energis and 2 from Cable & Wireless (including the Stoke on Trent address). Are these companies connected. I would suggest thast the claim that the UoL is his home address would need to be backed up as this one is looking the weakest of the 4. What I see (from my IP locator) is 3 editors, the Uol one being unlikely and the Energis and Cable &Wireless being possibly 2 users, one of whom might be Astrotrain, SqueakBox 23:48, 14 August 2007 (UTC)

:: In order;

71.203.79.81.in-addr.arpa. 14400 IN PTR user-514fcb47.l3.c4.dsl.pol.co.uk.
124.129.167.163.in-addr.arpa. 3600 IN PTR n129-124.unl.ac.uk.
121.21.240.90.in-addr.arpa. 14400 IN PTR user-5af01579.wfd96.dsl.pol.co.uk.
19.251.77.81.in-addr.arpa. 14400 IN PTR user-514dfb13.l4a.c1.dsl.pol.co.uk.
116.13.68.84.in-addr.arpa. 14400 IN PTR user-54440d74.lns1-c10.dsl.pol.co.uk.

- Alison ☺ 23:47, 14 August 2007 (UTC)

WHOIS - 84.68.13.116

mail iconEmail link to results

Generated by www.DNSstuff.com

Location: United Kingdom [City: Stoke On Trent, England]

Using 1 day old cached answer (or, you can get fresh results).

Displaying E-mail address (use sparingly -- this will make it more likely that you will trigger our rate limiting system).

% This is the RIPE Whois query server #1.

% The objects are in RPSL format.

% Rights restricted by copyright.

% See http://www.ripe.net/db/copyright.html

% Information related to '84.64.0.0 - 84.71.255.255'

inetnum: 84.64.0.0 - 84.71.255.255

netname: EU-EN-20040315

country: GB

org: ORG-CaWT1-RIPE

descr: Cable & Wireless Telecommunication Services GmbH

admin-c: GNOC4-RIPE

tech-c: GNOC4-RIPE

status: ALLOCATED PA

mnt-by: RIPE-NCC-HM-MNT

mnt-lower: CW-EUROPE-GSOC

mnt-lower: CW-IPGNOC-MNT

mnt-domains: CW-DNS-MNT

mnt-domains: ENERGIS-MNT

mnt-routes: CW-EUROPE-GSOC

mnt-routes: AS5378-MNT

notify: ipadmin@eu.cw.net

changed: hostmaster@ripe.net 20040315

changed: hostmaster@ripe.net 20061206

changed: bitbucket@ripe.net 20070130

source: RIPE

organisation: ORG-CaWT1-RIPE

org-name: Cable and Wireless Telecommunication Services GmbH

org-type: LIR

address: Landsbergerstr. 155

address: 80687

address: Muenchen

address: Germany

phone: +49 89 926 99 111

fax-no: +49 89 926 99 808

e-mail: ipadmin@cw.net

admin-c: DS3356-RIPE

admin-c: MG10145-RIPE

admin-c: SM6163-RIPE

admin-c: DOM12-RIPE

admin-c: SA79-RIPE

admin-c: RS27341-RIPE

admin-c: AB14382-RIPE

admin-c: TOC-RIPE

admin-c: JO361-RIPE

mnt-ref: CW-EUROPE-GSOC

mnt-ref: RIPE-NCC-HM-MNT

mnt-by: RIPE-NCC-HM-MNT

changed: hostmaster@ripe.net 20040415

changed: bitbucket@ripe.net 20040511

changed: bitbucket@ripe.net 20041019

changed: bitbucket@ripe.net 20041112

changed: bitbucket@ripe.net 20041122

changed: bitbucket@ripe.net 20041217

changed: bitbucket@ripe.net 20041228

changed: bitbucket@ripe.net 20050201

changed: bitbucket@ripe.net 20050310

changed: bitbucket@ripe.net 20050315

changed: bitbucket@ripe.net 20050406

changed: bitbucket@ripe.net 20050418

changed: bitbucket@ripe.net 20050502

changed: bitbucket@ripe.net 20050617

changed: bitbucket@ripe.net 20050623

changed: bitbucket@ripe.net 20051014

changed: bitbucket@ripe.net 20051117

changed: bitbucket@ripe.net 20060224

changed: bitbucket@ripe.net 20060330

changed: bitbucket@ripe.net 20060406

changed: bitbucket@ripe.net 20060509

changed: bitbucket@ripe.net 20060517

changed: bitbucket@ripe.net 20060628

changed: bitbucket@ripe.net 20060711

changed: bitbucket@ripe.net 20060817

changed: bitbucket@ripe.net 20061005

changed: bitbucket@ripe.net 20061009

changed: bitbucket@ripe.net 20061011

changed: bitbucket@ripe.net 20061016

changed: bitbucket@ripe.net 20061017

changed: bitbucket@ripe.net 20061124

changed: bitbucket@ripe.net 20061130

changed: bitbucket@ripe.net 20061206

changed: bitbucket@ripe.net 20061207

changed: bitbucket@ripe.net 20061208

changed: bitbucket@ripe.net 20061213

changed: bitbucket@ripe.net 20061218

changed: bitbucket@ripe.net 20070110

changed: bitbucket@ripe.net 20070212

changed: bitbucket@ripe.net 20070215

changed: bitbucket@ripe.net 20070221

changed: bitbucket@ripe.net 20070308

changed: bitbucket@ripe.net 20070322

changed: bitbucket@ripe.net 20070416

changed: bitbucket@ripe.net 20070716

changed: bitbucket@ripe.net 20070727

changed: bitbucket@ripe.net 20070808

changed: bitbucket@ripe.net 20070809

changed: bitbucket@ripe.net 20070813

source: RIPE

role: Cable and Wireless IP GNOC Munich

remarks: IP Admin Department

address: Landsbergerstr. 155

address: 80687 Munich

address: Germany

e-mail: ipadmin@cw.net

admin-c: TOC-RIPE

tech-c: TOC-RIPE

tech-c: SM6163-RIPE

tech-c: RS27341-RIPE

tech-c: SA79-RIPE

abuse-mailbox: abuse@cw.net

nic-hdl: GNOC4-RIPE

mnt-by: CW-IPGNOC-MNT

changed: tcremer@de.cw.net 20040203

changed: tcremer@de.cw.net 20040727

changed: tcremer@de.cw.net 20041105

changed: tcremer@de.cw.net 20051014

changed: annette.moll@cw.com 20051126

changed: tcremer@de.cw.net 20060714

changed: tcremer@de.cw.net 20060807

changed: smorhoff@cw.net 20070403

source: RIPE

% Information related to '84.64.0.0/13AS5388'

route: 84.64.0.0/13

descr: Energis UK

origin: AS5388

mnt-by: ENERGIS-MNT

changed: matt.mcintyre@energis.com 20020916

source: RIPE

[The following lines added by www.dnsstuff.com per requirement by RIPE]

This service is subject to the terms and conditions stated in the RIPE NCC Database Copyright Notice.

Contact dnsstuff.com's 'info2@' address to report problems regarding the functionality of the service.

This is one of the Cable and Wireless results from whois, as you can see from the bottom it links to Energis UK, the other Cable & Wireless one does as well, I am not totally convinced this is Astrotrain or him working alone I suspect someone else involved in this.--padraig 23:56, 14 August 2007 (UTC)

:In such an issue I would say good faith means if we think there are 2+ people that is likely true, SqueakBox 23:58, 14 August 2007 (UTC)

;Conclusions

This data is inconclusive. It seems probable that there are at least two people behind the IP edits, and I'm not confident that any of them are connected to Astrotrain. If problems are continuing semi-protection and a Checkuser are in order. --Akhilleus (talk) 02:14, 23 August 2007 (UTC)

----